CVE-2026-67285CWE-22path-traversal

CVE-2026-67285

published August 12, 2026

CVSS
9.2
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00506 · 42.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-12T18:18Z
References (1)
https://www.joomshaper.com/page-builder · [email protected]
EPSS history
Timeline
  • 12 AUG 13:54Z
    Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0
    cvelistv5